Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/045e585e-8292-389d-a1f1-87e5aa9d3e80.roa
File: 045e585e-8292-389d-a1f1-87e5aa9d3e80.roa (raw, json)
Hash identifier: axkLPGwYdjrJrI0ytR/R3JK1nSDmCzR6ykbxbDKoFoE=
Subject key identifier: FB:EB:96:F6:B9:64:81:A2:1B:1C:55:17:7C:54:61:FD:F8:1A:95:12
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285848100A960CE6AC37CA3CC0CA80
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/045e585e-8292-389d-a1f1-87e5aa9d3e80.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 14618
IP address blocks: 107.151.224.0/24 maxlen: 24
107.151.225.0/24 maxlen: 24
107.151.226.0/24 maxlen: 24
107.151.227.0/24 maxlen: 24
107.151.228.0/24 maxlen: 24
107.151.229.0/24 maxlen: 24
107.151.230.0/24 maxlen: 24
107.151.231.0/24 maxlen: 24
107.151.232.0/24 maxlen: 24
107.151.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:96:0c:e6:ac:37:ca:3c:c0:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=d9cddeb8-423f-4e11-85fb-aa42cc8aacb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ae:cd:ab:af:42:fb:10:00:07:bd:f8:b9:22:
55:6f:3b:e1:f7:58:ca:14:c2:b5:b1:2f:fc:f1:fb:
48:11:61:06:77:cb:27:e2:f4:f3:1f:aa:d0:75:73:
36:0c:ad:c0:cf:d6:27:57:0a:9e:4f:09:4f:96:f2:
a8:2b:a5:bf:16:8f:31:57:e6:45:39:c8:45:d3:3e:
24:bf:44:da:b4:4d:e5:da:eb:89:3e:bc:55:c9:5b:
15:23:5f:3f:33:96:fd:b5:50:67:11:4c:5e:ef:18:
6a:65:b8:6b:ca:d7:ac:88:9b:4c:cb:f9:77:fd:98:
04:84:28:02:07:dd:7c:87:a8:d2:da:6c:84:38:7e:
46:48:9e:6c:a1:1c:92:5a:0e:5d:0b:7a:96:44:0d:
72:2f:14:9d:11:5b:92:a5:9d:5e:8c:75:be:df:56:
60:ca:d0:92:de:40:df:1b:6a:58:b7:a3:4a:0f:b3:
d2:d0:2f:b1:2d:28:46:30:4d:bb:ab:3b:6c:29:b5:
87:2b:b2:4d:95:e1:47:6d:5f:b0:d3:ee:bc:c3:e7:
7d:68:00:48:8f:ba:ae:93:29:57:07:4e:27:f7:79:
09:f6:39:4b:d1:85:46:b9:6a:ee:df:8d:6f:29:f9:
e1:8c:d9:38:ea:f6:49:fa:be:72:27:2f:79:3f:a0:
71:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EB:96:F6:B9:64:81:A2:1B:1C:55:17:7C:54:61:FD:F8:1A:95:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/045e585e-8292-389d-a1f1-87e5aa9d3e80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.224.0-107.151.233.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:69:bf:8e:8f:3e:a1:8b:06:cc:c7:d9:9c:87:82:05:9b:68:
64:50:20:8a:11:3e:42:27:07:98:dc:94:d1:3b:01:fb:ac:b2:
ca:f5:c9:67:83:04:5a:01:59:75:74:b6:02:c5:ca:9a:ad:95:
9d:eb:c2:b3:c0:de:f7:9a:72:e9:78:5d:c5:ef:27:ef:38:e9:
cb:4f:8a:9c:bf:85:06:a5:f1:3c:54:8b:50:70:22:78:cd:e2:
2e:4b:7a:b6:f1:80:be:17:91:4a:ae:13:52:10:fb:c7:cc:e7:
9a:5f:78:eb:17:b0:6d:7f:b0:98:2f:aa:aa:fc:49:1b:c0:b1:
b6:22:e8:e2:fb:72:ef:d8:7c:63:ae:0d:8e:82:3a:bd:53:18:
b1:48:1c:25:c6:78:35:cd:b6:29:01:bb:f3:31:fb:40:a8:3e:
0f:17:88:74:52:83:71:24:c7:e1:50:66:e6:45:96:c0:ca:37:
f2:72:69:ad:66:77:bd:f8:78:bd:a5:db:ed:99:7d:e6:46:6a:
1f:49:24:2a:36:b7:ac:73:4c:59:e8:80:ec:46:99:3d:e5:22:
94:25:df:27:38:f9:fe:2a:7c:93:90:e1:8a:83:1c:82:61:46:
95:03:d7:d9:90:c8:ef:fd:2f:90:82:de:d6:d8:59:49:11:29:
b9:ce:19:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:48:56 2025 by rpki-client